- Koha-bugs - lists.koha-community.org

[Bug 34597] New: Expired patrons can still place ILL requests through OPAC
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=34597 Bug ID: 34597 Summary: Expired patrons can still place ILL requests through OPAC Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: ILL Assignee: koha-bugs(a)lists.koha-community.org Reporter: pedro.amorim(a)ptfs-europe.com CC: katrin.fischer(a)bsz-bw.de, magnus(a)libriotech.no, martin.renvoize(a)ptfs-europe.com, nick(a)bywatersolutions.com, pedro.amorim(a)ptfs-europe.com, tomascohen(a)gmail.com Noticed this, not sure if very severe or not. But I wonder if placing an ILL request should be included in BlockExpiredPatronOpacActions. To reproduce, on k-t-d: 1) Enable ILLmodule and install FreeForm, run: bash <(curl -s https://raw.githubusercontent.com/ammopt/koha-ill-dev/master/start-ill-dev.…) 2) Make koha/koha user expired, run mysql-kohadev: update borrowers set dateexpiry = '2020-12-31' where borrowernumber=51; 3) Visit OPAC/cgi-bin/koha/opac-user.pl and verify there's a user expired notification 4) Visit OPAC/cgi-bin/koha/opac-illrequests.pl and create a new ILL request 5) It's created with no issue -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 53

[Bug 42386] New: Unify hold availability checks into Koha::Availability pattern
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42386 Bug ID: 42386 Summary: Unify hold availability checks into Koha::Availability pattern Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Architecture, internals, and plumbing Assignee: koha-bugs(a)lists.koha-community.org Reporter: tomascohen(a)gmail.com QA Contact: testopia(a)bugs.koha-community.org Depends on: 41728, 42385 Hold availability is currently split across three different interfaces with different return shapes: - Koha::Patron->can_place_holds â patron eligibility gate Returns Koha::Result::Boolean with messages - C4::Reserves::CanItemBeReserved â item-level hold policy Returns hashref with {status} - C4::Reserves::CanBookBeReserved â biblio-level hold policy Returns hashref with {status} This bug proposes unifying these into the Koha::Availability pattern introduced in bug 41728: - Koha::Patron::Hold::Availability â patron eligibility checks (expired, debt, restricted, card lost, global hold limit) - Koha::Item::Hold::Availability â item-level hold policy checks (hold policy, circ rules, on-shelf holds, pickup location, etc.) Both would return Koha::Availability::Result and support no_short_circuit and overrides, consistent with the checkin availability class. This would also require untangling patron-level checks that leaked into CanItemBeReserved (e.g. maxreserves in certain code paths) and pushing them back to the patron-level orchestrator. Note: This is a significant refactoring effort. CanItemBeReserved has ~15 different checks with complex interactions. A multi-patch approach is recommended. Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41728 [Bug 41728] Add `Koha::Item::Checkin::Availability` to centralize logic https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42385 [Bug 42385] Extract _GetCircControlBranch into Koha::Policy::Circulation -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 129

[Bug 42605] New: Acquisition Items not listed during receipt
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42605 Bug ID: 42605 Summary: Acquisition Items not listed during receipt Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: major Priority: P5 - low Component: Acquisitions Assignee: koha-bugs(a)lists.koha-community.org Reporter: nick(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org To recreate: 1 - Ensure AcqCreateItem is set to 'placing an order' at syspref or on basket 2 - Open a basket, add an order, and add several items 3 - Close the basket and receive shipments 4 - Select the order and 'Receive selected' or click 'Receive' on the order 5 - No items are listed in the items section -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 43

[Bug 25465] New: Batch delete records based on imported MARC batch
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=25465 Bug ID: 25465 Summary: Batch delete records based on imported MARC batch Change sponsored?: --- Product: Koha Version: master Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org Various vendors send libraries batches of MARC records for deletion -- these are records the library already has in their system that should be deleted as the vendor no longer offers them. Right now we can: - stage the batch for import using a matching rule - run a report to return matched biblionumbers - batch delete based on the report output It'd be great to streamline this. My two thoughts are either we could add a new option to batch record deletion to allow use of an imported file to identify records OR we could add a new matching behavior of "delete matched record" to the batch staging tool. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 2

[Bug 41903] New: Overdues reports in circulation module are too resource intensive
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=41903 Bug ID: 41903 Summary: Overdues reports in circulation module are too resource intensive Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Circulation Assignee: koha-bugs(a)lists.koha-community.org Reporter: andrew(a)bywatersolutions.com QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com, kyle(a)bywatersolutions.com The circ module includes reports "Overdues" and "Overdues with fines." Both are sufficiently resources intensive as to cause noticeable slowdowns on large systems when used during business hours. They should be rewritten using APIs and VUE to improve performance. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 226

[Bug 43709] New: Cataloging: intermittent 400/403 error when switching MARC framework in the basic editor (addbiblio.pl)
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43709 Bug ID: 43709 Summary: Cataloging: intermittent 400/403 error when switching MARC framework in the basic editor (addbiblio.pl) Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: normal Priority: P5 - low Component: Cataloging Assignee: koha-bugs(a)lists.koha-community.org Reporter: adolfo.rodriguez(a)xercode.es QA Contact: testopia(a)bugs.koha-community.org CC: m.de.rooy(a)rijksmuseum.nl Target Milestone: --- In the basic MARC editor (cataloguing/addbiblio.pl), switching the framework from the "Settings" dropdown (.change-framework links) intermittently fails with a 400 or 403 error instead of reloading the form with the new framework. The failure is frequent but not systematic. Two independent causes combine to produce this: 1. Missing e.preventDefault() on the .change-framework click handler. Changefwk() submits the form via POST, but the triggering link (href="#") is never cancelled. Depending on browser/timing, the hash navigation can race with the form submit, and the server can end up receiving a GET request instead of POST. The CSRF middleware rejects any GET request carrying op=cud-* => 400. 2. CSRF token invalidated by browser bfcache. The CSRF token (Koha::Token, see _add_default_csrf_params in Koha/Token.pm) is tied to userid + '_' + session_id. If the session changes while the page is open (session expiry followed by a new session, logout in another tab, or external session cleanup) and the browser serves the page from bfcache with the old embedded token, validation fails => 403. addbiblio.pl's Cache-Control: no-cache (without no-store) does not prevent bfcache from serving the page. Steps to reproduce (#2, the more reliably reproducible of the two): 1. Open the basic MARC editor for a record (cataloguing/addbiblio.pl) in a tab. 2. In another tab, log out, or let the session expire, or otherwise invalidate the current session (e.g. restart Plack / clear sessions table). 3. Navigate away from the editor tab and back (browser back/forward, or close and reopen via history) so it is served from bfcache with the stale CSRF token still embedded. 4. Use "Settings" > switch framework. The request fails with 403 (or the page behaves as if nothing happened, depending on how the browser renders the cached state). #1 is timing/browser-dependent and harder to force deterministically from the UI; it was identified by code audit of the click handler (.change-framework lacks preventDefault while the <a href="#"> stays a live navigation target). Proposed fix (4 independent, complementary changes): 1. addbiblio.tt: add e.preventDefault() to the .change-framework click handler, so the href="#" navigation never competes with the POST submit. 2. addbiblio.tt: store the page's CGISESSID cookie value on load; before submitting via Changefwk(), compare it to the current cookie and reload the page instead of submitting if it changed. 3. addbiblio.tt: add a 'pageshow' listener that reloads the page when event.persisted is true (page served from bfcache), so a stale CSRF token is never submitted. 4. addbiblio.pl: pass { force_no_caching => 1 } to both output_html_with_http_headers calls, adding Cache-Control: no-store so the page is excluded from bfcache in browsers that honor it. Bug 37745 and Bug 34478 fixed earlier problems with the framework switch (duplicated CSS class, missing CSRF token), but these two issues were not caught by either. -- You are receiving this mail because: You are watching all bug changes. You are the assignee for the bug.

1 5

[Bug 43609] New: Update some acquisitions pages to use grid layout for forms - Part 2
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43609 Bug ID: 43609 Summary: Update some acquisitions pages to use grid layout for forms - Part 2 Initiative type: --- Sponsorship Sponsored status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Templates Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org CC: testopia(a)bugs.koha-community.org Depends on: 39780, 43583 Target Milestone: --- - acqui/invoice-files.tt - acqui/invoice.tt - acqui/invoices.tt - acqui/parcels.tt Referenced Bugs: https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=39780 [Bug 39780] Update library groups form to use grid layout https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43583 [Bug 43583] Update some acquisitions pages to use grid layout for forms - Part 1 -- You are receiving this mail because: You are watching all bug changes.

1 6

[Bug 42097] New: Add link to create new club from list of club templates
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42097 Bug ID: 42097 Summary: Add link to create new club from list of club templates Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Tools Assignee: oleonard(a)myacpl.org Reporter: oleonard(a)myacpl.org QA Contact: testopia(a)bugs.koha-community.org To create a new club you have to choose the club template from a (potentially) long list of club templates. I think it would be useful to also offer the option of creating a new club directly from the club templates actions. -- You are receiving this mail because: You are watching all bug changes.

1 13

[Bug 43229] New: Purchase suggestions incorrectly promises an email confirmation for anonymous suggestions
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=43229 Bug ID: 43229 Summary: Purchase suggestions incorrectly promises an email confirmation for anonymous suggestions Initiative type: --- Sponsorship --- status: Product: Koha Version: unspecified Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: OPAC Assignee: oleonard(a)myacpl.org Reporter: lari.taskula(a)hypernova.fi QA Contact: testopia(a)bugs.koha-community.org Target Milestone: --- 1. Enable preference suggestion 2. Enable preference AnonSuggestions 3. Navigate to OPACBaseURL/cgi-bin/koha/opac-suggestions.pl?op=add_form (make sure you are not logged in) 4. Click "+ New purchase suggestion" 5. Observe text "You will receive an email when the library processes your suggestion." -- You are receiving this mail because: You are watching all bug changes.

1 22

[Bug 42584] New: Allow extra elements on staff top navigation bar
by bugzilla-daemon＠bugs.koha-community.org 13 Oct '26

13 Oct '26

https://bugs.koha-community.org/bugzilla3/show_bug.cgi?id=42584 Bug ID: 42584 Summary: Allow extra elements on staff top navigation bar Initiative type: --- Sponsorship --- status: Product: Koha Version: Main Hardware: All OS: All Status: NEW Severity: enhancement Priority: P5 - low Component: Staff interface Assignee: koha-bugs(a)lists.koha-community.org Reporter: m.de.rooy(a)rijksmuseum.nl QA Contact: testopia(a)bugs.koha-community.org CC: gmcharlt(a)gmail.com Adding elements via new location StaffMastHeadExtraContent in html customizationf of additional contents. -- You are receiving this mail because: You are the assignee for the bug. You are watching all bug changes.

1 32